Author Topic: action center in windows 7 (solved) (Read 68001 times)

Gamezertruth · « **Reply #25 on:** August 27, 2015, 02:13:22 pm »

1- Malwarebytes Anti-Malware (detected by)
2- SUPERAntiSpyware (not detected by)
3- Removal Tool (not detected by)

that was detected by many portable scanner too (kaspersky virus removal tool )

Boggin · « **Reply #26 on:** August 27, 2015, 02:40:44 pm »

While I've never used Comodo Free, I know a member of another forum who swears by it which is why I suggested it and I would think that he has MBAM installed.

When you run an antimalware scan on a system it checks all programs and you will see the scanner checking listing them as it works through them which is normal.

If the scanner wants to remove the program then that is a different matter.

Should anything have come down with the Comodo install, then download AdwCleaner and/or Junkware Removal Tool and see if they find anything serious.

What is that Removal Tool you've listed ?

Gamezertruth · « **Reply #27 on:** August 27, 2015, 02:48:54 pm »

aha thanks for heads up reply and I will check this out with adware cleaner tool and post back

Removal too is an anti-malware program http://9-lab.com/

Boggin · « **Reply #28 on:** August 27, 2015, 02:53:58 pm »

I've never heard of 9Lab or seen it listed in any reviews.

Gamezertruth · « **Reply #29 on:** August 27, 2015, 02:58:07 pm »

Quote from: Boggin on August 27, 2015, 02:53:58 pm

I've never heard of 9Lab or seen it listed in any reviews.

aha :tongue:this software has a Similar detection of Mbam ! lol so there is something should Concern about?

Boggin · « **Reply #30 on:** August 27, 2015, 03:17:22 pm »

Not if it works - I tend to stay with the more well known brands that have a proven track record.

While it's wise to have more than one scanner installed as one can pick up what another can miss - how effective is that one ?

When I get a chance, I'll Google to see if there are any reviews on it.

Gamezertruth · « **Reply #31 on:** August 27, 2015, 03:22:20 pm »

it’s party powerful scanner as I have used for a while

Boggin · « **Reply #32 on:** August 27, 2015, 03:28:00 pm »

So are you going to stay with Comodo or did any of the scanners want to remove it and have you ran ADW or JRT yet ?

Gamezertruth · « **Reply #33 on:** August 27, 2015, 03:33:14 pm »

Quote from: Boggin on August 27, 2015, 03:28:00 pm

So are you going to stay with Comodo or did any of the scanners want to remove it and have you ran ADW or JRT yet ?

Will I think about it if I will stay with it or no and I’m going to run both tools right now from a USB ! is that Okay ?

and yes kaspersky want to remove it but The system got the unexpected shutdown

and I have a lot of security software's on the new USB hard drive so I may run all of that scanner for a test

Gamezertruth · « **Reply #34 on:** August 27, 2015, 04:00:28 pm »

I just done that and here the logs files , so even adw and JRT have detected some of Comodo ! and I will post Mbam log here

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.5.8 (08.24.2015:1)
OS: Windows 7 Ultimate x86
Ran by b on Fri 08/28/2015 at 1:45:45.75
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Tasks

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer

~~~ Files

Successfully deleted: [File] C:\Users\Public\Desktop\geekbuddy.lnk

~~~ Folders

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Fri 08/28/2015 at 1:51:00.47
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

# AdwCleaner v5.003 - Logfile created 28/08/2015 at 01:52:42
# Updated 20/08/2015 by Xplode
# Database : 2015-08-25.1 [Server]
# Operating system : Windows 7 Ultimate Service Pack 1 (x86)
# Username : b - B-PC
# Running from : F:\malware scanner\adwcleaner_5.003.exe
# Option : Cleaning

***** [ Services ] *****

[-] Service Deleted : MasSvc_{MaxthonAppStore_1.0.0.10539}

***** [ Folders ] *****

***** [ Files ] *****

[-] File Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Start GeekBuddy.lnk

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\GeekBuddyRSP

***** [ Web browsers ] *****

*************************

:: Proxy settings cleared
:: Winsock settings cleared

*************************

C:\AdwCleaner[S2].txt - [669 bytes] - [15/08/2015 14:55:55]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [898 bytes] ##########

Gamezertruth · « **Reply #35 on:** August 27, 2015, 04:07:27 pm »

I’m running a malware check again with Mbam

Boggin · « **Reply #36 on:** August 27, 2015, 04:10:42 pm »

Where is Comodo mentioned in those logs ?

Gamezertruth · « **Reply #37 on:** August 27, 2015, 04:17:47 pm »

Quote from: Boggin on August 27, 2015, 04:10:42 pm

Where is Comodo mentioned in those logs ?

hmmm this other Comodo products it come installed with a Comodo antivirus setup so it bundle my with some other Comodo’s products

GeekBuddy is a Comodo products

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 8/28/2015
Scan Time: 1:58 AM
Logfile:
Administrator: Yes

Version: 2.1.8.1057
Malware Database: v2015.08.27.05
Rootkit Database: v2015.08.16.01
License: Premium
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: b

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 329419
Time Elapsed: 17 min, 17 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 5
CrackTool.Agent, C:\ProgramData\Comodo\Cis\Quarantine\data\{3DCCA088-67F4-4999-AF8A-9D1801895814}, , [f0e1a964fc8f5fd708f47f779d632bd5],
PUP.Optional.InstallCore, C:\ProgramData\Comodo\Cis\Quarantine\data\{516F8FCB-513F-4E96-B087-E5B59276E948}, , [b51c3fce22693afc1dda1f725baa7f81],
PUP.RiskWareTool.CK, C:\ProgramData\Comodo\Cis\Quarantine\data\{B72002FA-D632-4FBA-B9C1-9F8744047EA1}, , [e3ee56b7a7e4a492787ef4d2cb363cc4],
PUP.RiskWare.Patcher, C:\ProgramData\Comodo\Cis\Quarantine\data\{B8E80BC7-7413-47CE-9422-5424CC1F3896}, , [1fb20ffec2c9ce68ffe66561bf429769],
PUP.RiskWareTool.CK, C:\ProgramData\Comodo\Cis\Quarantine\data\{E1131FEE-15F4-4EBA-AC01-DEED2C68402E}, , [884941cc4a4183b3fafc893d9d648f71],

Physical Sectors: 0
(No malicious items detected)

(end)

Gamezertruth · « **Reply #38 on:** August 27, 2015, 06:33:29 pm »

Emsisoft Emergency Kit - Version 10.0
Last update: 8/28/2015 3:21:29 AM
User account: b-PC\b

Scan settings:

Scan type: Custom Scan
Objects: Rootkits, Memory, Traces, C:\

Detect PUPs: On
Scan archives: On
ADS Scan: On
File extension filter: Off
Advanced caching: On
Direct disk access: Off

Scan start:   8/28/2015 3:28:19 AM

C:\ProgramData\Comodo\Cis\Quarantine\data\{E1131FEE-15F4-4EBA-AC01-DEED2C68402E}    detected: Gen:Variant.Kazy.143588 (B)
C:\ProgramData\Comodo\Cis\Quarantine\data\{B72002FA-D632-4FBA-B9C1-9F8744047EA1}    detected: Gen:Variant.Kazy.143588 (B)
C:\ProgramData\Comodo\Cis\Quarantine\data\{516F8FCB-513F-4E96-B087-E5B59276E948}    detected: Gen:Variant.Mikey.22543 (B)

Scanned   178833
Found   3

Scan end:   8/28/2015 4:17:33 AM
Scan time:   0:49:14

Samson · « **Reply #39 on:** August 28, 2015, 03:27:21 am »

Geekbuddy is Comodo remote assistance (an optional extra offered during install....." you must always read before hitting the Next, Install or Download button." - Boggin), who would probably charge you, then recommend WR!

The other stuff looks like generic detections that Comodo has quarantined.

Gamezertruth · « **Reply #40 on:** August 28, 2015, 08:27:32 am »

good to know that Samson

Samson · « **Reply #41 on:** August 28, 2015, 09:23:32 am »

I would also not recommend deleting the contents of your AV's quaratine immediately. Sometimes a false positive could end up in there. Leave items in there for a while, say a month or so, and if no ill effects you can rescan them or delete them.

Gamezertruth · « **Reply #42 on:** August 28, 2015, 12:22:39 pm »

Quote from: Samson on August 28, 2015, 09:23:32 am

I would also not recommend deleting the contents of your AV's quaratine immediately. Sometimes a false positive could end up in there. Leave items in there for a while, say a month or so, and if no ill effects you can rescan them or delete them.

then I’ll keep them there for a month

and sure I will do that to see if they a false positive

Samson · « **Reply #43 on:** August 28, 2015, 12:34:33 pm »

Re scan with updated virus defs after a month or so, if in doubt leave them in Quarantine.

Gamezertruth · « **Reply #44 on:** August 28, 2015, 12:37:58 pm »

will do

Gamezertruth · « **Reply #45 on:** August 29, 2015, 03:50:21 am »

other scanner flag Comodo files ?

Samson · « **Reply #46 on:** August 29, 2015, 03:54:48 am »

Look at the location of those, they appear to be in Comodo's quarantine. Also they have been "skipped" under actions.

Gamezertruth · « **Reply #47 on:** August 29, 2015, 04:03:28 am »

Quote from: Samson on August 29, 2015, 03:54:48 am

Look at the location of those, they appear to be in Comodo's quarantine. Also they have been "skipped" under actions.

yes But I'm wondering since this Scanner has a different detection! you need to took a closely look at the screenshot

Samson · « **Reply #48 on:** August 29, 2015, 04:12:48 am »

Compare that list with what is in Comodo's quarantine.

EDIT: Also, whatever scanner that was has detected UVK as a trojan.....What scanner is that which you have posted the results for above?

Gamezertruth · « **Reply #49 on:** August 29, 2015, 04:19:27 am »

ok I’ll check that and reply back